Privacy Policy

1. Information you provide

Account information includes your phone number or information supplied by your chosen sign-in provider, such as an email address and account identifier. Profile information includes your display name, username, bio, chosen avatar or uploaded profile photo, and sharing preferences.

We store activity you submit, including ratings, reviews, watchlist entries, lists and rankings, friend requests and connections, show or movie suggestions, and related timestamps. If you email us, we receive the information included in your message. Please do not include sensitive information in public profiles or reviews.

2. Device information and browsing

Requests to Pilot and its providers may generate technical records such as IP addresses, request times, app or browser details, and error or security logs. We use these records to deliver the service, diagnose failures, and prevent abuse.

Pilot stores sign-in information, preferences, cached catalog information, and certain activity on your device. The Viewed feature currently keeps up to 100 recently opened title pages on that device, separately by account and by TV or movie mode. This local recent-title history is separate from the signed-in usage events described below and is not used for advertising. Pilot does not monitor playback in other streaming apps.

Usage analytics

For signed-in users, we record show and movie clicks and detail-page views, including the title and catalog identifier, originating screen and carousel, timestamps, navigation and app-session identifiers, platform, and app/build version. We use these first-party records to understand discovery and improve Pilot. These analytics are accessible to authorized operators, not other users, and are stored in Supabase. We do not include contact information, raw search text, or review text in these events.

Events may be queued on your device for up to seven days while delivery is retried. Server-side usage events are retained for up to 90 days and are deleted when the associated account is deleted. These events do not track playback in other apps and are not used for personalized advertising.

Crash reporting and reliability monitoring

We use Sentry to detect crashes, investigate errors, and measure loading times, slow responses, and timeouts. Diagnostic data may include error stack traces, app and build versions, device and operating-system details, timestamps, operation names, response status, and loading durations. Monitoring can operate whether or not you are signed in. Sentry also receives technical connection information, such as your IP address, when diagnostic data is transmitted.

Pilot uses a randomly generated identifier stored on your app installation to help count affected installations. This identifier is not your Pilot account ID, and we do not use it to connect your identity across devices. Our monitoring configuration disables default personal-information collection and filters error reports to remove request payloads, breadcrumbs, extra data, and original error-message text. We do not intentionally send your name, email address, phone number, reviews, messages, or raw search text to Sentry.

Session Replay, screenshots, and view-hierarchy capture are disabled. We do not use Sentry to record videos of your app sessions or for personalized advertising. Diagnostic records are retained according to our Sentry project and provider retention settings; they are separate from the account-linked usage events described above. Because the installation identifier is not linked to your account, deleting an account does not automatically identify or remove its diagnostic records. Contact us with questions or requests about this information.

3. Public profiles and shared activity

New profiles are discoverable by default. When discovery is enabled, your name, username, and avatar may appear in user search and Recent Pilot Fans, including to people who are not signed in. Your phone number and email address are not displayed in that preview.

Community rating/review sharing and friend activity sharing are enabled by default. Depending on your settings, ratings and reviews may be visible to the Pilot community, and accepted friends may see rating and watchlist activity. Lists are currently shared within the Pilot community; do not use them to store private information.

Review the discovery and sharing controls in Edit profile. Turning off discovery prevents future inclusion in discovery results, but it does not automatically remove existing friendships or change other sharing settings. Previously shared information may already have been seen or copied. Profile-photo preview links can remain valid briefly after a setting changes.

4. Optional permissions

Contact matching runs only when you choose it and grant permission. The app reads permitted contact email addresses and phone numbers, normalizes them, and sends hashed identifiers to find matching discoverable accounts. Contact names, notes, and photos are not uploaded for matching, and the uploaded contact list is not saved as a contact book. Hashing does not make identifiers anonymous. We also maintain matching identifiers derived from verified account contact details.

If you choose a profile photo, the selected image is uploaded for use as your avatar. If you enable push notifications, a device push token and notification preferences are used to deliver alerts. You can revoke contacts, photo, or notification permissions in your device settings; doing so does not by itself delete previously uploaded information.

5. Why we use information

We use information to create and secure accounts, deliver verification codes, save and display activity, connect users, provide requested notifications and suggestions, operate discovery features, respond to support requests, and investigate misuse. We also use technical information to maintain and improve reliability.

We use information only for purposes described here or otherwise explained when it is collected, subject to applicable law. Providing an account contact method is necessary for the corresponding sign-in method; optional permissions are not required to browse the catalog.

6. Providers and other disclosures

Supabase provides account authentication, database, file storage, and server functions. Sentry provides crash reporting and reliability monitoring as described above. Twilio processes phone numbers and verification requests to send SMS codes. Google, and Apple when enabled, process sign-in through their services. Expo and platform notification services help deliver enabled push notifications. Catalog and rating information comes from services including TMDB, MDBList, and Watchmode; image delivery and title lookups involve requests to these services or their infrastructure.

Providers receive information needed for their role and may also process technical request information under their own policies. Your account credentials and profile activity are not needed to open a streaming-service link. When you leave Pilot for another service, its terms and privacy policy apply.

Information is also disclosed through the sharing features you use. We may disclose relevant information when required by law, to investigate abuse or protect people and the service, or as part of a transfer of the service subject to applicable privacy obligations and notice.

7. Free service and possible future advertising

Pilot currently does not charge users and does not currently use their app activity to personalize advertising. We may introduce advertising or sponsorships in the future. A possible model would use interests inferred from activity within Pilot, such as titles rated, saved, viewed, or added to lists, to select relevant ads.

This describes a possible future feature, not a statement that ad personalization is active or permission to begin it without further steps. Before introducing it, we will update this policy to describe the activity used, advertising partners, disclosures, retention, and available controls, and provide any notices, opt-outs, or consent required by applicable law and platform rules. Any new use or upload of device-only Viewed history would also be explained before it begins. Authentication SMS consent is not advertising consent.

8. Storage, retention, and security

Account and activity records are retained while needed to provide your account and the features you use, unless you remove information through an available control or request deletion. Some records may be retained longer for security, legal obligations, or resolving disputes. Provider logs and backups may follow separate retention cycles. Deletion from active systems does not necessarily remove information immediately from provider logs or backups; those copies are subject to the applicable retention cycles and legal obligations.

Device data can remain after sign-out. Clearing browser storage or removing the app may remove local data, subject to device backup behavior, but does not delete your cloud account. Conversely, a cloud deletion request does not necessarily erase copies on other devices.

We use authenticated access, permission controls, and other safeguards to protect information, but no system is perfectly secure. Providers may process information in the United States or other countries. Contact us for questions about processing locations or safeguards.

9. Your choices and requests

You can edit your profile and sharing preferences and manage supported watchlist and list entries in the app. Depending on where you live and the laws that apply, you may have rights to access, correct, delete, or receive a copy of personal information, and to restrict or object to certain uses.

Email privacy@watchwithpilot.com with privacy questions or an access, correction, or deletion request. We may need to verify ownership before acting; do not send passwords or SMS verification codes. We will handle requests subject to applicable requirements and explain any information we must retain. You can also delete your account in Profile & settings → Manage account → Delete account. This removes your Pilot and Premiere account, uploaded photos, ratings, reviews, lists, messages, and associated personal activity. Other members may keep using shared groups; deleted content may be replaced with an anonymous placeholder. If deletion is still processing, the app shows its status and confirms completion.

10. Age eligibility

Pilot is intended for people aged 16 and older. People under 16 may not use Pilot or create an account, and we do not knowingly collect personal information from them. Store content ratings describe content suitability and do not replace this minimum age requirement. If we learn that we have collected personal information from someone under 16, we will take steps to delete it, subject to applicable legal obligations. If you believe someone under 16 has provided personal information, contact privacy@watchwithpilot.com.

11. Updates and contact

We will revise this policy when our practices change and update the date above. For material changes, we will provide additional notice where appropriate or required. We will seek consent when required rather than treating a policy update alone as consent to a new use.

Operator and privacy contact: Turkel Anwar, privacy@watchwithpilot.com. This policy covers Pilot and Premiere; it does not replace the privacy policies of third-party streaming platforms.